Third-year Computer Science student at Babeș-Bolyai University, working across systems software, network protocols and applied cryptography.

I build against primary sources rather than tutorials: a Cell Broadcast emergency alerting system implemented from the 3GPP specifications and interoperating with Osmocom, and a Rust SDK combining fully homomorphic encryption, zero-knowledge proofs and threshold cryptography. Both ship with continuous integration, an explicit licence and a documented account of what they do not do.

Alongside that I do security research. I found and reported an unauthenticated denial-of-service vulnerability in the proxy layer of a production managed-database platform, awarded through its bug bounty programme.

Reported a remotely triggerable out-of-memory condition in the connection proxy behind Neon's managed Postgres platform, reachable by an unauthenticated client. Attacker-supplied values were interned into a string cache with no upper bound, so memory could be driven to exhaustion without ever logging in.

Submitted through Neon's HackerOne programme, triaged as medium severity and closed with an award. Neon is the serverless Postgres platform acquired by Databricks.

Geo-targeted emergency evacuation over Cell Broadcast. A hazard placed on a floor plan determines who is warned and which exit they are routed to, then the alert is transmitted on the matching radio cell, where simulated handsets decode it off the air rather than being told what they received.

Implemented against 3GPP TS 23.041, 44.012 and 23.038, with per-hazard notification policies, Dijkstra routing over a portal graph, and a full transmission chain per cell. Continuous integration, Apache-2.0.

Repository

An SDK for private database queries. The server computes over ciphertext it can neither read nor silently alter, requests are authenticated by a zkVM proof and bound against replay, and results are unlocked only by true threshold decryption.

Lookup, blind search, oblivious writes and private aggregation over end-to-end encrypted data; the FHE secret key is secret-shared across parties and never reassembled. Published with a written threat model. Continuous integration, Apache-2.0.

Repository

A real-time competitive hacking game played inside live Docker containers. Each player receives an isolated Debian container with a bash session streamed to the browser, fortifies it during a setup phase, then infiltrates the opponent's machine.

Container lifecycle management, bidirectional terminal streaming over WebSockets, and Elo-rated matchmaking backed by PostgreSQL.

Repository

A railway timetable mirror and QR encoder. A Selenium pipeline scrapes public route data into a relational schema, and a desktop client resolves a train number into its ordered stop sequence and encodes trip details into a QR payload.

A study project in scraping, relational modelling and desktop UI; the payloads carry no issuer signature and are not valid travel documents.

Repository

A Visual Studio 2022 extension that turns a natural-language prompt into code and streams it into the editor incrementally, with pause, stop and skip controls. Multilingual prompts, configurable model backend, distributed as a signed VSIX.

Repository

BSc Computer Science, 2024 to 2027.

_{Coursework: data structures and algorithms, graph algorithms, object-oriented programming, advanced programming methods, databases, computer networks, functional and logic programming.}